diff --git a/init/subcontext.cpp b/init/subcontext.cpp index 85da23734..927953d67 100644 --- a/init/subcontext.cpp +++ b/init/subcontext.cpp @@ -23,6 +23,7 @@ #include #include +#include #include #include @@ -30,6 +31,7 @@ #include "system/core/init/subcontext.pb.h" #include "util.h" +using android::base::GetBoolProperty; using android::base::GetExecutablePath; using android::base::Join; using android::base::Socketpair; @@ -258,12 +260,13 @@ Result Subcontext::Execute(const std::vector& args) { static std::vector subcontexts; std::vector* InitializeSubcontexts() { - static const char* const paths_and_secontexts[][2] = { - // TODO: Enable this once the SEPolicy is in place. - // {"/vendor", kVendorContext.c_str()}, - }; - for (const auto& [path_prefix, secontext] : paths_and_secontexts) { - subcontexts.emplace_back(path_prefix, secontext); + if (GetBoolProperty("ro.init.subcontexts_enabled", false)) { + static const char* const paths_and_secontexts[][2] = { + {"/vendor", kVendorContext.c_str()}, + }; + for (const auto& [path_prefix, secontext] : paths_and_secontexts) { + subcontexts.emplace_back(path_prefix, secontext); + } } return &subcontexts; }